Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

1 vulnerability found for MovatwiTouch Paid Version by jig.jp co., ltd.

JVNDB-2013-000047

Vulnerability from jvndb - Published: 2013-05-29 15:32 - Updated:2013-05-29 15:32
Severity ?
N/A (UNKNOWN) - -
Summary
Content Provider in MovatwiTouch fails to restrict access permissions
Details
MovatwiTouch is a Twitter client software for Android devices. The Content Provider in MovatwiTouch contains an issue where access permissions are not restricted. Masata Nishida of Advanced Research Laboratory, SecureBrain Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
Impacted products
Show details on JVN DB website
To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000047.html",
  "dc:date": "2013-05-29T15:32+09:00",
  "dcterms:issued": "2013-05-29T15:32+09:00",
  "dcterms:modified": "2013-05-29T15:32+09:00",
  "description": "MovatwiTouch is a Twitter client software for Android devices. The Content Provider in MovatwiTouch contains an issue where access permissions are not restricted.\r\n\r\nMasata Nishida of Advanced Research Laboratory, SecureBrain Corporation reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000047.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:jig_jp_co:movatwitouch",
      "@product": "MovatwiTouch",
      "@vendor": "jig.jp co., ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:jig_jp_co:movatwitouch_paid",
      "@product": "MovatwiTouch Paid Version",
      "@vendor": "jig.jp co., ltd.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "2.6",
    "@severity": "Low",
    "@type": "Base",
    "@vector": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2013-000047",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN90289505/index.html",
      "@id": "JVN#90289505",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2318",
      "@id": "CVE-2013-2318",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-2318",
      "@id": "CVE-2013-2318",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-264",
      "@title": "Permissions(CWE-264)"
    }
  ],
  "title": "Content Provider in MovatwiTouch fails to restrict access permissions"
}